diff options
author | Liping Zhang <liping.zhang@spreadtrum.com> | 2016-06-11 12:20:28 +0800 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-06-15 12:17:23 +0200 |
commit | a02f424863610a0a7abd80c468839e59cfa4d0d8 (patch) | |
tree | 28099616ed619231311c804950b77f3401179245 /net/netfilter/nf_tables_core.c | |
parent | 8588ac097b49ce8802f11541d9cd6f6667badb34 (diff) |
netfilter: nf_tables: fix wrong destroy anonymous sets if binding fails
When we add a nft rule like follows:
# nft add rule filter test tcp dport vmap {1: jump test}
-ELOOP error will be returned, and the anonymous set will be
destroyed.
But after that, nf_tables_abort will also try to remove the
element and destroy the set, which was already destroyed and
freed.
If we add a nft wrong rule, nft_tables_abort will do the cleanup
work rightly, so nf_tables_set_destroy call here is redundant and
wrong, remove it.
Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_tables_core.c')
0 files changed, 0 insertions, 0 deletions